Looks good indeed but would be interested to know how do you secure API keys.
Even though read only, trades can be initiated which could be really annoying in case of a breach.
For most of us this is a critical point when using a third part software to manage live portfolios.
Definitely understand your concerns, security of our users' data is paramount.
Using read-only keys is the best protection you have whenever giving third-parties access to your exchange accounts. Read-only keys will not initiate trades or move funds.
That said, we have established proprietary measures for protecting all user data in addition to following all industry best-practices.
- Aaron